Comment by yobbo

Seems it's like ssh keys, but fiddled automatically in the browser. A password unlocks the local keys.

This means keys need to be transported between devices. Which means even tighter coupling to google and microsoft accounts.